diff options
Diffstat (limited to 'debian/signing-template/control.in')
| -rw-r--r-- | debian/signing-template/control.in | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/debian/signing-template/control.in b/debian/signing-template/control.in new file mode 100644 index 00000000..9d75d925 --- /dev/null +++ b/debian/signing-template/control.in @@ -0,0 +1,25 @@ +Source: shim-helpers-@arch@-signed +Section: admin +Priority: optional +Maintainer: Debian EFI team <debian-efi@lists.debian.org> +Standards-Version: 4.3.0 +Build-Depends: debhelper (>= 10.1~), + sbsigntool [amd64 arm64 i386], + shim-unsigned (= @version_binary@), + +Package: shim-helpers-@arch@-signed +Architecture: @arch@ +Conflicts: shim (<< 15+1533136590.3beb971-3~), +Replaces: shim (<< 15+1533136590.3beb971-3~), shim-signed (<< 1.29), +Breaks: shim-signed (<< 1.29), +Depends: shim-unsigned (>= @version_binary@), ${misc:Depends}, +Built-Using: shim (= @version_binary@) +Description: boot loader to chain-load signed boot loaders (signed by Debian) + This package provides a minimalist boot loader which allows verifying + signatures of other UEFI binaries against either the Secure Boot DB/DBX or + against a built-in signature database. Its purpose is to allow a small, + infrequently-changing binary to be signed by the UEFI CA, while allowing + an OS distributor to revision their main bootloader independently of the CA. + . + This package contains the MOK manager and fall-back manager signed by the + Debian UEFI CA to be used by shim-signed. |